News for hackers. Stuff that matters.
Re:Why TLS 1.3 isn't in browsers yet by nerdponx on Wednesday December 27, 2017 @06:26PM (#16019004)
I'm okay with this if and only if browser vendors make old releases available for download, or better yet open-source their old releases. That way we can be more confident, when archiving pages that no longer render correctly, someone will be able to actually view them.
Re:Why TLS 1.3 isn't in browsers yet by bzbarsky on Wednesday December 27, 2017 @11:39PM (#16020347)
Old Firefox releases (binary and source) are very much available for download, though whether you can run them on modern operating systems somewhat varies. And you almost certainly can't compile some of them with a modern compiler, though a compiler from the era of the release should work...

Anyway, https://ftp.mozilla.org/pub/firefox/releases/ has links to all the Firefox release binaries and corresponding source snapshots starting with version 0.8. It includes a number of the betas as well (so for example has the Firefox 58 beta builds already).

Re:Why TLS 1.3 isn't in browsers yet by katastic on Thursday December 28, 2017 @04:35AM (#16021141)
>And you almost certainly can't compile some of them with a modern compiler,

I wonder how long and difficult it must be to get all the required dependencies to compile a modern web browser...

[two hours of obscure error messages later]

"You have v2.3030392.302 of dependency 113, you need to compile v2.3030392.300 in 32-bit first, then build the 64-bit version of v2.3030392.301 then ..."

You get all the compiler errors fixed and then it's on to round two... linker errors.

Re:Why TLS 1.3 isn't in browsers yet by majewsky on Thursday December 28, 2017 @06:55AM (#16021567)
Maybe old browser versions should be archived as container images with all the necessary shared libraries. Then the only interface that might break them is the kernel interface, and we know Linus' stance on breaking userspace.
Re:Why TLS 1.3 isn't in browsers yet by katastic on Thursday December 28, 2017 @06:12PM (#16025933)
I've created dev environment VM's with classic operating systems (XP, etc) because my job involves updating lots of really old code (most clients only update when they have to, every 5-10 years).

I could definitely see someone doing that with Firefox. They may already exist. I've just, from experience, had so much trouble with compiling large codebases.

On the bright side, the larger a codebase, often, the more popular. And the more popular, the more likely people will have EXACT dependencies listed.

Re:Why TLS 1.3 isn't in browsers yet by bzbarsky on Friday December 29, 2017 @03:29AM (#16028387)
For the current version, it's not too bad if you're on a "popular enough" OS. For example, Firefox has a bootstrap.py script for Linux which will install the right packages on either Ubuntu or Fedora Core. See https://developer.mozilla.org/en-US/docs/Mozilla/Developer_g...

https://developer.mozilla.org/en-US/docs/Mozilla/Developer_g... lists the actual set of libraries and whatnot needed; converting those to the relevant package names for the Linux distro of your choice is tedious, but not too hard.

For an old version, things could be more complicated, depending...

Re:Why TLS 1.3 isn't in browsers yet by jopsen on Wednesday December 27, 2017 @07:36PM (#16019370)
Firefox is open source as is large portions of chrome and the engine in safari...

So mostly you're talking about IE/Edge...